Quantcast
Channel: ScreenOS Firewalls (NOT SRX) topics
Viewing all articles
Browse latest Browse all 763

Need Some help with a BGP Config.

$
0
0

I have a config working on Junos and it is as below.  I don't know bgp on the screen os boxes well enough to get the same thing working there.

 

basically I will get a bgp peer take all routes they anounce to me then mark them as discard or send them to gateway null

secondly I will not announce anything back to the peer as this is a one way exchange of routes.

 

any help would be greatly apreciated.

 

/*
* Define BGP peer group
*/
delete protocols bgp group bogons
set protocols bgp group bogons type external
set protocols bgp group bogons description "fullbogon bgp feed (ipv4 + 6)"
set protocols bgp group bogons multihop ttl 255
set protocols bgp group bogons import bogons-in
/*
* Define MD5 password in quotes
*/
set protocols bgp group bogons authentication-key "<YOUR PASSWORD>"
set protocols bgp group bogons export deny-all
set protocols bgp group bogons peer-as 65332
/*
* Replace values below as appropriate
*/
set protocols bgp group bogons neighbor A.B.C.D local-address <YOUR IP>
set protocols bgp group bogons neighbor A.B.C.D family inet unicast
set protocols bgp group bogons neighbor A.B.C.D family inet6 unicast
set protocols bgp group bogons neighbor E.F.G.H local-address <YOUR IP>
set protocols bgp group bogons neighbor E.F.G.H family inet unicast
set protocols bgp group bogons neighbor E.F.G.H family inet6 unicast
/*
* Define import policy
*/
delete policy-options policy-statement bogons-in
set policy-options policy-statement bogons-in term 1 from family inet
set policy-options policy-statement bogons-in term 1 from community comm-bogon
set policy-options policy-statement bogons-in term 1 then community add no-export
set policy-options policy-statement bogons-in term 1 then next-hop discard
set policy-options policy-statement bogons-in term 1 then accept
set policy-options policy-statement bogons-in term 2 from family inet6
set policy-options policy-statement bogons-in term 2 from community comm-bogon
set policy-options policy-statement bogons-in term 2 then community add no-export
set policy-options policy-statement bogons-in term 2 then next-hop discard
set policy-options policy-statement bogons-in term 2 then accept
set policy-options policy-statement bogons-in then reject
/*
* Define deny-all export policy
*/
delete policy-options policy-statement deny-all
set policy-options policy-statement deny-all then reject
/*
* Define Bogon community
*/
delete policy-options community comm-bogon
set policy-options community comm-bogon members no-export
set policy-options community comm-bogon members 65000:123
/*
* Define internal no-export community
*/
delete policy-options community comm-no-export
set policy-options community comm-no-export members no-export


Viewing all articles
Browse latest Browse all 763

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>